Configure the network content filter - Deploy the custom profile for network protection. - Administrator Guide - 8.9 - 9.1 - Cortex XDR Agent - Cortex XDR - Advanced Endpoint Protection - Cortex - Security Operations

Deploy the custom profile for network protection.This step is required because Intune does not include all the available payload fields in the settings catalog in its user interface.

Using a text editor, copy the XML code below, replace ENTER YOUR DISTRIBUTION ID HERE with your Distribution ID, and save as CortexXDR_NetworkContentFilter.mobileconfig.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>FilterBrowsers</key>
			<true/>
			<key>FilterSockets</key>
			<true/>
			<key>FilterType</key>
			<string>Plugin</string>
			<key>PayloadDescription</key>
			<string>Configures content filtering settings</string>
			<key>PayloadDisplayName</key>
			<string>Cortex XDR Network Data Filter</string>
			<key>PayloadIdentifier</key>
			<string>com.apple.webcontent-filter.2EF1184F-FC41-4477-BA81-D46AB318D8BB</string>
			<key>PayloadOrganization</key>
			<string>Palo Alto Networks</string>
			<key>PayloadType</key>
			<string>com.apple.webcontent-filter</string>
			<key>PayloadUUID</key>
			<string>2EF1184F-FC41-4477-BA81-D46AB318D8BB</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>PluginBundleID</key>
			<string>com.paloaltonetworks.cortex.ios</string>
			<key>UserDefinedName</key>
			<string>Cortex XDR</string>
			<key>VendorConfig</key>
			<dict>
				<key>distributionId</key>
				<string>ENTER YOUR DISTRIBUTION ID HERE</string>
				<key>username</key>
				<string>{{username}}</string>
				<key>fullName</key>
				<string>{{userprincipalname}}</string>
				<key>serialNumber</key>
				<string>{{serialnumber}}</string>
				<key>udid</key>
				<string>{{udidlast4digits}}</string>
			</dict>
		</dict>
	</array>
	<key>PayloadDescription</key>
	<string></string>
	<key>PayloadDisplayName</key>
	<string>Cortex XDR Network Content Filter With DistID</string>
	<key>PayloadEnabled</key>
	<true/>
	<key>PayloadIdentifier</key>
	<string>0921C926-7798-4BEB-9D19-14D3C3E2D912</string>
	<key>PayloadOrganization</key>
	<string>Palo Alto Networks</string>
	<key>PayloadRemovalDisallowed</key>
	<false/>
	<key>PayloadScope</key>
	<string>System</string>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>6D5B9C87-FA3D-4C2D-9FEA-478A10250D26</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>